Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: q14gUGYGgzMe5Y0E6FAg26YQkzLcoXgyVRyCCn+n8TQ=
Subject key identifier: 1F:2F:4E:6B:01:04:FF:84:BB:9B:23:58:0B:1C:73:A0:44:64:B5:C5
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 01A0D9BAB0140B8EBB67389BCBF3425C89DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 03F2
Signing time: Fri 25 Sep 2026 18:01:25 +0000
Manifest this update: Fri 25 Sep 2026 18:01:25 +0000
Manifest next update: Sat 26 Sep 2026 18:01:25 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: pvl32oAJ/3G07UgnqudlRxepzuNr8j8qROB+HSDVzUc=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:b0:14:0b:8e:bb:67:38:9b:cb:f3:42:5c:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Sep 25 18:01:25 2026 GMT
Not After : Sep 26 18:01:25 2026 GMT
Subject: CN=1f2f4e6b0104ff84bb9b23580b1c73a04464b5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:eb:48:71:86:e9:fc:54:02:5f:c4:ab:4a:
93:58:7e:3d:64:6b:98:ba:02:30:0c:5c:2d:3f:01:
51:83:82:2d:cb:36:e5:58:f2:3e:e3:1b:6b:35:32:
03:20:8a:51:dc:ce:83:8e:4b:7b:d3:53:c9:a0:c3:
9f:38:4e:9c:78:d3:c0:36:48:b0:89:3a:61:c6:47:
32:20:9e:12:55:55:dc:cd:f8:89:b3:a2:20:ba:f2:
30:61:af:3c:5e:94:3b:2f:38:f5:ef:7f:4f:16:9c:
4d:a0:32:82:6f:58:3b:16:85:cb:d4:ee:8f:f9:a8:
73:83:2e:54:58:0a:2d:00:8f:63:55:31:fd:56:22:
05:c2:6f:60:c4:9e:9c:a8:31:a8:76:d9:6b:46:7e:
18:b0:af:55:60:19:22:36:48:33:bb:8a:0b:25:e5:
f4:98:54:67:df:15:e4:01:1c:4a:d2:ac:1d:c3:4f:
cb:ee:da:e5:eb:b5:b6:01:af:a8:58:ab:15:37:8f:
31:af:46:85:09:29:82:27:03:15:05:aa:2e:da:d2:
05:7a:d4:19:76:f0:d6:1c:07:ec:ac:2c:81:9b:64:
7f:28:9e:e9:06:21:01:18:22:37:a6:f5:8b:7f:05:
be:83:52:fb:a6:de:93:2a:d0:8f:76:e5:a5:c0:66:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:4E:6B:01:04:FF:84:BB:9B:23:58:0B:1C:73:A0:44:64:B5:C5
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:41:9b:6b:a3:4f:89:61:68:9b:e3:c5:0b:c9:ba:09:aa:
e4:8b:37:0c:9f:5d:0a:cb:b0:d8:a4:2c:5c:de:1d:b4:34:0d:
0f:59:a6:b7:44:46:eb:45:32:01:18:d2:1e:92:27:dc:20:97:
54:fb:f9:17:14:aa:a3:67:5a:5e:82:79:9f:94:87:58:88:7f:
81:f0:76:a5:a8:e9:44:04:84:38:47:04:b3:f3:0c:a2:19:1e:
ca:81:39:35:c8:08:5d:ac:3c:21:d2:63:1a:d0:0f:0f:88:ab:
99:15:fe:96:d7:a0:6b:bc:16:3e:f7:1a:2a:43:23:2c:bb:2e:
7d:a2:d8:06:6a:a9:27:80:c1:8e:e4:36:63:d1:90:97:99:93:
00:f9:c7:1c:49:6a:fc:69:20:e1:b4:fb:36:ae:6b:d0:bb:e9:
65:e5:9c:00:a3:26:88:b9:d2:aa:39:06:11:94:a3:41:37:04:
71:cb:31:f7:b0:4c:40:fa:0a:1c:86:ca:22:3a:78:de:c2:fd:
d0:5f:62:98:f1:43:28:28:b6:b3:5f:c6:81:e7:e3:cc:08:d6:
31:50:fa:04:b7:a2:e3:09:9a:15:41:9c:ed:ec:29:b7:cf:1d:
5e:05:64:50:5d:d8:82:47:7e:5b:9a:d8:26:3d:10:ab:de:05:
be:22:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:48 2026 by rpki-client